Gato-X Release v0.6.0

Release of version v0.6.0

This version bump includes bug fixes along with improvements to the Runner-on-Runner attack features. The payload only mode is now more flexible because it will create a C2 repository if one is not specified. This will be useful for manual exploitation scenarios and for red teamers who simply want to use the GitHub Actions runner as a C2 implant.

What's Changed

• Bump actions/setup-python from 4 to 5 by @dependabot in #45
• Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 by @dependabot in #39
• Bump psf/black from 24.8.0 to 24.10.0 by @dependabot in #55
• Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.12.2 by @dependabot in #59
• Bump softprops/action-gh-release from 2.0.8 to 2.0.9 by @dependabot in #57
• Fix broken windows RoR and improve attack UX. by @AdnaneKhan in #61
• Fix inconsistency with environment enumeration by @AdnaneKhan in #63
• Bump version to 0.6.0 by @github-actions in #64

Full Changelog: v0.5.8...v0.6.0

Gato-X Release v0.5.8

Release of version v0.5.8

What's Changed

• Improve Gato-X Release Process by @AdnaneKhan in #43
• Fix error saving JSON output with empty repo enum results. by @AdnaneKhan in #42
• Fix issue where single trigger fails check by @AdnaneKhan in #46
• Fix secrets exfil failure case bug by @AdnaneKhan in #47

New Contributors

• @github-actions made their first contribution in #48

Full Changelog: 0.5.5...v0.5.8

Gato-X Version 0.5.5

What's Changed

• Fix bugs with MacOS RoR and not respecting the custom workflow filename. by @AdnaneKhan in #18
• Use multithreading for GraphQL workflow ingestion by @AdnaneKhan in #19
• Enumerate user owned and collab repos as part of self enum by @AdnaneKhan in #22
• Improve validation clarity for different token types. by @AdnaneKhan in #24
• Format all Python files with black and enforce formatting. by @AdnaneKhan in #35
• Support App tokens for single repo enumeration by @AdnaneKhan in #37

Full Changelog: 0.5.4...0.5.5

Gato-X Version 0.5.4

What's Changed

• Fix user repo enum bug by @AdnaneKhan in #10
• Fix SH runner false negative by @AdnaneKhan in #12
• Fix SH Runner False Negative by @AdnaneKhan in #14
• Update README.md by @pswalia2u in #15
• Minor Bugfixes and Updates by @AdnaneKhan in #16
• Bump version to 0.5.4 by @AdnaneKhan in #17

New Contributors

• @pswalia2u made their first contribution in #15

Full Changelog: 0.5.3...0.5.4

Gato-X Version 0.5.3

What's Changed

• Remove version print in splash. by @AdnaneKhan in #7
• Update README.md by @AdnaneKhan in #8
• Fix user enum error and add tests. by @AdnaneKhan in #9

Full Changelog: 0.5.2...0.5.3

Gato-X Version 0.5.2

Fix sigstore job (#6)

* Update pypi_publish.yml

* bump minor